Filtered by vendor Nodstrum
Subscribe
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2008-5737 | 1 Nodstrum | 1 Mysql Calendar | 2017-09-28 | 7.5 HIGH | N/A |
SQL injection vulnerability in index.php in Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands via the username parameter. | |||||
CVE-2008-5738 | 1 Nodstrum | 1 Mysql Calendar | 2017-09-28 | 7.5 HIGH | N/A |
Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the nodstrumCalendarV2 cookie to 1. NOTE: some of these details are obtained from third party information. |